Spring Boot 2 Interceptor在每个请求上都解析“ / login”

Question

Inside Spring boot security I'm trying to redirect server side the login page within Spring boot automatically to an overview page if I detect that the user is already logged in. The login screen should only show when the user is logged out.

@Configuration
public class MvcConfig implements WebMvcConfigurer
{

   @Override
   public void addInterceptors( InterceptorRegistry registry )
   {
      registry.addInterceptor( new LoginInterceptor() ).addPathPatterns( "/login" );
   }

Inside LoginInterceptor I have:

   @Override
   public boolean preHandle( HttpServletRequest request, HttpServletResponse response, Object handler ) throws Exception
   {

      Authentication auth = SecurityContextHolder.getContext().getAuthentication();
      String url = request.getRequestURL().toString();
      System.out.println(url);
      if( auth.isAuthenticated() )
      {
         response.sendRedirect( "/my/overview" );
         return false;
      }

      return true;
   }

However, even if I am logged in, the debugger seems to think that I'm still on the /login route. Does spring boot route every request through /login for checking authentication? How do I achieve my aim of not resolving the login page unless the user is logged out?

Answer 1

Actually what was happening here was 'anonymousUser' was being returned for isAuthenticated, and thus the authenticated method wasn't working. The redirect for unauthorised accounts kicked in making me think that everything was going through login route when it was actually just the security doing its thing. checking for principle null was the way to go instead.

 if( auth.isAuthenticated() && principal != null )
 {
      response.sendRedirect( OVERVIEW_PAGE );
      return false;
 }